direct http to https on certain pages?

Question

Below is some code I added to my .htaccess code how can I add certain pages to be re-directed to https? (such as login.php & login.html)

Also, if the user types in www. they get a "untrusted connection" as the SSL is only valid without the www. How could I fix this?

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteCond %{REQUEST_URI} /login.html
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

Answer 1

1) You can always explicitly force redirects using the apache RedirectMatch statements:

RedirectMatch ^/login.html$ https://myhostname/login.html
RedirectMatch ^/logout.html$ https://myhostname/logout.html

2) The SSL problem goes away if you explicitly direct traffic to the proper version of the hostname (i.e. get them in the habit of using one format for the url). Another option is to use an SSL wildcard certificate if you want to service multiple hostnames with a single SSL instance.